$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa File: 158142d2-a6b7-34ca-be4a-89fc8257488f.roa (raw, json) Hash identifier: cx2d/It+f+zMKvnvyX5n6JdAonxYGC2qmCExh/7HRA8= Subject key identifier: 83:9C:5C:48:BD:51:E9:9A:BD:FE:7B:97:E2:DE:93:78:E5:59:CB:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4972CFDBFFA3F86AD2B51E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:cf:db:ff:a3:f8:6a:d2:b5:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=64817fb9-cf8f-4c94-ae65-ceb577c44135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:46:3f:c3:c4:e9:45:0d:3e:d4:5a:fa:86: df:33:8d:c3:3e:6c:38:14:d3:1f:4f:9b:86:f1:a4: 02:37:1e:4a:59:99:17:41:e4:77:5f:e6:ae:d4:70: 21:47:af:48:72:31:36:5b:2b:f2:ed:fc:a7:c4:9f: 6a:c8:f2:55:81:f6:ee:90:55:ad:10:bb:96:65:37: 96:87:95:52:91:39:40:24:2f:8d:66:29:39:b6:e2: 88:91:b9:2b:84:d4:d4:93:f7:eb:17:d9:c3:90:6e: 82:80:d8:e8:54:67:2f:5c:77:c6:f0:84:53:11:cf: 1b:91:f8:69:21:84:9b:7c:e2:c2:f5:92:02:c5:05: c7:1f:80:bd:bf:8a:4f:97:59:b6:93:ee:5f:48:08: e1:24:09:70:99:1f:8c:3f:b9:ab:dd:1a:b8:c1:e6: bc:eb:37:f0:e1:61:09:28:91:32:95:ad:4c:6b:a9: 07:2f:5e:05:88:45:10:65:b9:e1:fc:bb:63:62:a6: 11:24:b3:bf:2e:3f:06:33:82:ab:63:dd:8a:2c:74: 09:88:66:5c:ec:4c:91:57:8c:21:19:f0:eb:f8:b8: 92:6c:04:3a:1d:1e:55:40:b2:e8:0b:e4:8e:40:87: 79:e4:97:ec:0f:49:a7:fa:5e:05:3b:86:f7:5f:9a: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:5C:48:BD:51:E9:9A:BD:FE:7B:97:E2:DE:93:78:E5:59:CB:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c9:56:e0:28:12:2e:09:f4:ae:9f:67:72:74:74:bd:0e:a5: bf:98:83:99:c0:90:a7:b0:f7:ba:e8:61:f6:1d:68:ea:ef:a8: f6:92:74:ee:66:98:12:63:6e:fc:f0:0f:79:57:9b:f1:6d:39: 34:35:1a:25:e3:0c:96:21:10:fe:e3:00:3a:02:b8:98:af:cb: 94:19:08:04:53:35:52:3a:b8:d6:82:28:66:c5:46:7d:db:fa: 56:c0:28:5a:6c:19:6d:af:86:34:58:67:6b:9e:94:c9:c0:8f: 25:c5:a0:18:e6:5c:f5:69:49:db:7d:0e:05:6d:70:23:78:c3: 3a:04:d9:14:47:c5:0f:f9:e9:01:1b:e2:78:33:6b:6e:39:35: 57:d2:0b:a2:dd:2e:85:98:bd:e6:c7:62:a5:54:9a:74:0c:d5: 8b:b8:60:90:89:81:3e:1a:32:cd:b7:70:4a:7b:cb:28:86:fb: 90:e2:41:f0:6f:e6:e8:88:10:f8:8b:b6:b5:ec:36:4f:42:d1: 73:40:43:9f:1d:b5:1c:e2:89:96:7a:e3:f1:e4:f8:ae:cf:92: 8f:4f:35:12:0c:2e:f1:d0:8b:7e:4a:fa:c8:ea:bc:42:7d:03: aa:44:36:0e:79:96:2a:e1:95:28:34:33:bf:65:18:8b:3d:06: 06:f9:35:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcs/b/6P4atK1HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjQ4MTdmYjktY2Y4Zi00Yzk0LWFlNjUtY2ViNTc3YzQ0MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWNGP8PE6UUNPtRa+obfM43DPmw4FNMfT5uG 8aQCNx5KWZkXQeR3X+au1HAhR69IcjE2Wyvy7fynxJ9qyPJVgfbukFWtELuWZTeW h5VSkTlAJC+NZik5tuKIkbkrhNTUk/frF9nDkG6CgNjoVGcvXHfG8IRTEc8bkfhp IYSbfOLC9ZICxQXHH4C9v4pPl1m2k+5fSAjhJAlwmR+MP7mr3Rq4wea86zfw4WEJ KJEyla1Ma6kHL14FiEUQZbnh/LtjYqYRJLO/Lj8GM4KrY92KLHQJiGZc7EyRV4wh GfDr+LiSbAQ6HR5VQLLoC+SOQId55JfsD0mn+l4FO4b3X5pzlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOcXEi9Uemavf57l+Lek3jlWct0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MTQyZDItYTZiNy0z NGNhLWJlNGEtODlmYzgyNTc0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHJVuAoEi4J9K6fZ3J0dL0Opb+Yg5nAkKew97roYfYdaOrvqPaSdO5m mBJjbvzwD3lXm/FtOTQ1GiXjDJYhEP7jADoCuJivy5QZCARTNVI6uNaCKGbFRn3b +lbAKFpsGW2vhjRYZ2uelMnAjyXFoBjmXPVpSdt9DgVtcCN4wzoE2RRHxQ/56QEb 4ngza245NVfSC6LdLoWYvebHYqVUmnQM1Yu4YJCJgT4aMs23cEp7yyiG+5DiQfBv 5uiIEPiLtrXsNk9C0XNAQ58dtRziiZZ64/Hk+K7Pko9PNRIMLvHQi35K+sjqvEJ9 A6pENg55lirhlSg0M79lGIs9Bgb5Ne4= -----END CERTIFICATE-----Generated at Sat Sep 26 06:57:43 2026 by rpki-client